hacking: security in practice
Why do developers make awesome hackers?

https://external-preview.redd.it/cK56bJHCBJ3A_PWeE6HJlMdArw01TkrycscWUh6sPDk.jpg?width=320&crop=smart&auto=webp&s=f202ce19b78ab5c03754aad8dd4746d28df06745 submitted by /u/kilbazas
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What do people think of ESR?

I was wondering what do people think of Eric Steven Raymond in the hacking community.

submitted by /u/Marimo_3D2Y
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Малварь для Android за полчаса. Отслеживаем местоположение, читаем SMS, пишем аудио и делаем фото

https://cdn-images-1.medium.com/max/1600/1*vLrG3CsKYMM_7r_H-3_e-Q.png
Итак, наша задача — разобраться, как работают современные зловредные приложения. А лучший способ это сделать — посмотреть, как создается…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Emotet. La morte di un malware 2014–2021

https://cdn-images-1.medium.com/max/2600/1*Fp43zS64ZPoWi4IAz1n3MA.jpeg
Breve storia del malware più pericoloso di tutti i tempi

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You’re a GD Thief!

https://cdn-images-1.medium.com/max/1280/1*qSKHBPaT0prcSJWgjdzN3A.png
Introducing a tool for exfiltrating all of the things from a Google Drive

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Invoke-Stealth - Simple And Powerful PowerShell Script Obfuscator

https://1.bp.blogspot.com/-MHETDXyK-Vs/YIerQpiHnSI/AAAAAAAAV_U/Gi67TI-jS-MoXZOTLEsFBCDIV9rrDQpsACNcBGAsYHQ/w640-h400/Invoke-Stealth_1_Invoke-Stealth.png
Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator.

This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux.
Requirements

* Powershell 4.0 or higher
* Bash*
* Python 3*

*Required to use all features

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:
git clone https://github.com/JoelGMSec/Invoke-Stealth.git

You can also download the limited version as follows:
powershell iwr -useb https://darkbyte.net/invoke-stealth.php -outfile Invoke-Stealth.ps1

Usage
.\Invoke-Stealth.ps1 -help

Info: This tool helps you to automate the obfuscation process of
any script written in PowerShell with different techniques

Usage: .\Invoke-Stealth.ps1 script.ps1 -technique Xencrypt
- You can use as single or separated by commas -

Techniques:
· Chimera: Substitute strings and concatenate variables
· Xencrypt: Compresses and encrypts with random iterations
· PyFuscation: Obfuscate functions, variables and parameters
· PSObfuscation: Convert content to bytes and encode with Gzip
· ReverseB64: Encode with base64 and reverse it to avoid detections
· All: Sequentially executes all techniques described above

Warning: The output script will exponentially multiply the original size
Chimera & PyFuscation need dependencies to work properly in Windows

The detailed guide of use can be found at the following link:

https://darkbyte.net/ofuscando-scripts-de-powershell-con-invoke-stealth

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

This script has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec

Some modules use third-party code, scripts, and tools, particularly:

• Chimera by tokyoneon --> https://github.com/tokyoneon/Chimera

• BetterXencrypt by GetRektBoy724 --> https://github.com/GetRektBoy724/BetterXencrypt

• PyFuscation by CBHue --> https://github.com/CBHue/PyFuscation

• PSObfuscation by gh0x0st --> https://github.com/gh0x0st/Invoke-PSObfuscation

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can contact through info@darkbyte.net
Download Invoke-Stealth

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Kirby CMS 3.5.3.1 Cross Site Scripting

https://4.bp.blogspot.com/-yl8JZs3kPK0/WWlvOF1SUeI/AAAAAAAAIMk/jv5-1ECzklsqpq4rMFWFx2wFFGh-Q9GlwCLcBGAs/s1600/h24.png
Kirby CMS version 3.5.3.1 suffers from a cross site scripting vulnerability.

MD5 | 1d1bb3ac967c07a128519e5db831d258

Download
# Exploit Title: Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS)
# Date: 21-04-2021
# Exploit Author: Sreenath Raghunathan
# Vendor Homepage: https://getkirby.com/
# Software Link: https://github.com/getkirby/kirby
# Version: 3.5.3.1(REQUIRED)
# CVE : CVE-2021-29460

POST /api/users/


">

-----------------------------286121627839893676321700902916--

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video